Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/8669146b-a8f2-3481-86f9-c3d012bdc299.roa
File:                     8669146b-a8f2-3481-86f9-c3d012bdc299.roa (raw, json)
Hash identifier:          k0P7gCG6kOerTJ+r2E38cknEwimdnYdDznEgSo73cRU=
Subject key identifier:   20:29:F0:BC:60:8A:E4:1A:64:E7:04:29:16:86:EB:8D:65:02:3D:D8
Certificate issuer:       /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial:       010D0C9F4328584EA7961C0A7B27B3D8C0B86E00
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/8669146b-a8f2-3481-86f9-c3d012bdc299.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        198.203.4.0/22 maxlen: 24
                          199.73.116.0/22 maxlen: 24
                          208.79.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:1c:0a:7b:27:b3:d8:c0:b8:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f0057054-1e88-4d87-a79a-4555d0b9add5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5e:c8:57:3d:a6:23:5c:25:9f:4b:79:32:d3:
                    88:2a:9b:09:b5:fe:6e:61:27:4c:c8:e1:49:5a:cb:
                    7f:e3:b1:14:f4:b1:89:b6:9c:e8:e8:ee:05:9a:58:
                    30:ea:f0:3c:b5:dd:59:41:06:6d:e5:09:6d:18:87:
                    b5:15:7b:46:38:fd:a9:f7:36:2d:75:12:5f:60:8d:
                    c0:cb:4d:c5:2a:dc:5d:22:85:20:bd:e7:e9:29:2f:
                    88:16:d6:b7:90:24:02:36:27:0c:7e:2d:7f:24:4f:
                    f6:e7:15:1c:cc:e1:1f:bd:48:9f:59:ec:30:88:a7:
                    a7:d4:f5:71:19:a4:fd:09:54:fd:d9:bd:70:5c:34:
                    8d:26:f1:a7:0d:c5:45:9c:e3:f9:bf:0d:98:57:d8:
                    02:41:de:af:8e:f4:8f:e7:e6:46:79:b8:4f:bb:af:
                    6c:1d:7c:01:68:72:9f:50:59:58:84:6b:09:78:ab:
                    29:79:1e:b5:2e:d3:01:df:12:13:bc:14:86:4e:95:
                    2b:b1:97:60:b8:a0:2c:b4:ab:3e:8b:b7:97:23:fb:
                    0a:93:66:b5:be:c8:6c:3c:37:8a:62:bd:20:79:c1:
                    18:ec:7b:ef:dc:c7:c3:3b:ec:b7:f4:f2:56:d0:e1:
                    a6:26:bf:f2:80:00:15:ab:35:88:41:63:b7:95:e4:
                    c5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:29:F0:BC:60:8A:E4:1A:64:E7:04:29:16:86:EB:8D:65:02:3D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/8669146b-a8f2-3481-86f9-c3d012bdc299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.203.4.0/22
                  199.73.116.0/22
                  208.79.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:81:4b:bb:59:d9:a2:98:b8:da:8a:79:d0:c5:f8:8e:81:2b:
         e4:2b:36:0d:8f:de:42:79:f3:bb:c9:36:47:79:b0:cf:44:1f:
         bf:25:00:1e:86:9c:4f:0b:77:79:fe:46:60:65:18:20:36:e0:
         de:86:7a:24:d7:7f:3f:30:f7:7a:e2:91:4f:89:a4:e4:7e:b1:
         0b:17:a1:4e:d9:14:d6:c0:cf:b4:1c:ac:12:a4:1a:5f:61:77:
         59:6a:dc:fa:2b:15:66:86:9f:fd:0f:93:bb:f8:15:49:54:be:
         c5:00:2c:43:0a:17:9b:e5:a5:da:ef:bf:88:ff:6e:96:3f:50:
         a8:5e:66:44:a3:e6:dd:e7:ba:1a:9c:d6:ff:7c:ac:37:37:18:
         49:d7:19:d6:8d:4c:e3:17:3b:9d:24:80:d3:b6:a3:15:59:16:
         6c:ab:cc:bc:8c:72:64:5d:4b:cd:31:75:4c:6a:21:3b:04:89:
         ce:57:b3:19:6d:64:a3:53:34:02:5b:b8:9d:12:c7:95:44:21:
         52:12:dc:9b:53:9c:37:5d:b2:14:bd:94:cd:8b:c5:6e:db:22:
         f6:1f:d1:ed:a9:0a:96:90:a6:a9:1d:70:59:89:ac:14:dc:90:
         34:01:f0:72:24:4f:75:99:0b:3a:f1:64:13:53:97:06:fb:7b:
         67:36:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:07:13 2026 by rpki-client